How can I restrict a domain administrator from creating users?
Solve this month's UPDATE challenge, and you might win a prize!
Several IT administrators have written to ask me this question: "How can I restrict a domain administrator from creating users"?
What's the answer to that question?
You can't. If you want to restrict the rights of a domain administrator you have to demote him/her to an administrative position that's lower than domain administrator.
Solve this month's UPDATE challenge, and you might win a prize! Email your solution (don't use an attachment) to email@example.com by November 23, 2010. You MUST include your full name, street mailing address (no P.O. Boxes), and a telephone number. Without that information, we can't send you a prize if you win, so your answer is eliminated, even if it’s correct.
I choose winners at random from the pool of correct entries. I’m a sucker for humor and originality, and a cleverly written correct answer gets an extra chance.
Because I receive so many entries each month, I can't reply to respondents, and I never respond to a request for an email receipt. Look for the solutions to this month's problem right here on December 14.
Congratulations to Jocelyn Sloan of Fargo North Dakota, the winner of our October 2010 Reader Challenge. The prize is a copy of Windows 7: The Definitive Guide from O'Reilly Media (www.ora.com).